apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  namespace: default
  name: lkml
  labels:
    app: lkml
spec:
  replicas: 1
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: lkml
    spec:
      serviceAccountName: lkml
      containers:
      - name: lkml
        image: gcr.io/kunit-presubmit/lkml
        imagePullPolicy: Always
        stdin: true
        tty: true
        args:
        - --config-path=/etc/config/config.yaml
        - --source-repo=https://kunit.googlesource.com/linux
        - --source-branch=kunit/alpha/master
        - --job-uri=kunit-dev@googlegroups.com
        ports:
          - name: smtp
            containerPort: 25
          - name: git
            containerPort: 9418
        volumeMounts:
        - name: repo
          mountPath: /kunit
          readOnly: false
        - name: config
          mountPath: /etc/config
          readOnly: true
      volumes:
      - name: repo
        persistentVolumeClaim:
          claimName: repo-storage
      - name: config
        configMap:
            name: config
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  labels:
    app: lkml
  name: repo-storage
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 3Gi
  # volumeName: added automatically after volume creation
  # See https://cloud.google.com/kubernetes-engine/docs/concepts/persistent-volumes
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: lkml
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: lkml
rules:
- apiGroups:
    - "prow.k8s.io"
  resources:
    - prowjobs
  verbs:
    - create
    - list
---
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: lkml
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: lkml
subjects:
- kind: ServiceAccount
  name: lkml
---